MI – Identity Specialist

About

As an Identity Specialist at Microsoft, you will be responsible for managing and securing user identities across our enterprise solutions. Your expertise in Windows Server, Microsoft Exchange, and Azure Active Directory will be crucial in implementing identity management strategies that enhance security and streamline user access. You will collaborate with various teams to ensure a robust identity framework that supports our customers’ needs.

Responsibilities

• Administer and manage Windows Server environments, including versions 2008, 2008 R2, 2012, and 2012 R2.
• Oversee Microsoft Exchange Server operations, ensuring a deep understanding of mail transport protocols (POP/IMAP/SMTP), DNS records (CNAME, MX, SPF), message tracing, and malware/spam filtering.
• Configure and maintain Azure AD Hybrid setups, including AAD Connect, AAD Connect Health, multi-forest sync, and hybrid Azure AD join.
• Implement user authentication solutions, including Multi-Factor Authentication (MFA), Single Sign-On (SSO), and passwordless authentication methods.
• Manage Conditional Access policies and Role-Based Access Control (RBAC) to ensure secure access to resources.
• Develop and implement identity protection strategies, including Privileged Identity Management (PIM) and entitlement management.
• Provide technical support and troubleshooting for identity-related issues up to tier 2 level.

Qualifications

• Proven experience with Windows Server administration and Microsoft Exchange Server.
• Strong knowledge of Azure Active Directory and hybrid configurations.
• Familiarity with user authentication methods, including MFA, SSO, and passwordless solutions.
• Understanding of Conditional Access, RBAC, and identity governance principles.
• Experience with Windows Desktop OS environments (Windows 7, 8.1, and/or Windows 10).
• Excellent problem-solving skills and the ability to communicate complex technical concepts to non-technical stakeholders.

LinkedIn Keywords: Azure Active Directory, Windows Server, Multi-Factor Authentication (MFA), Single Sign-On (SSO), Identity Governance